jbJjgLm jiiLj jUaiLS pa I 



. n i i ni-Sni Ç-J (ScûcLajas paj a£ /la^as a jga£ flsgit uuuUgui 

,aaSa3 isaglj itluiclSjÎiL g agniaigg^ j-S ng^ cl£ iSaJIJIj gaJ diiici£ 
. ali I LiÎlLlj 


RATs jLficiJI j (SajUjas iflcucûjgS 

Çcu <JL3 Cll j 

< aSj3 uuLScijljLiuLj aaUjcu uiJgj <flag jam clSj Software iflajciaUjaj 
Remote jJ jSI jajuailnia J cu >~ilîuiaalcun < 1 ~>g 7 >şaiîii j 9 jLScu jj^Iclj 
• dlLOperator jaJjo^ag uijjjS 
cûlg < a-Physical Access cULSjjuj jLScûlj uûajS jLS isjlgjjû 

I n n 7 1 1 1 1 iii jcLUICLJ □ g n T 11 i g M ■ .~i i i lgln-> g n i nm ^n iljl^igS ■ n^i jl gi i m 

uuj -Server Files- jaa jjm isgj3 uiiLSa±jLa jLjjgj clS aggajAjlg 
.jLggji -Trojan- Cijjlg Ai 




Çcu uia jlaöjj 

tSagJjcu jgîin ggn < jjulgjj jLScûlj aJ Cmjggjn uiScuagîjîicu jclSclj 


.(Client) iSgljSIuiggj3 g ^3dugL<& uiijLa .1 
.(Server) ,sgl>SIiLiggj3 g ^xjjgUn ulULö .2 
-RAT- Cilj g_£iag uiScuaaLjjcu isgjnaj JjLa ClgjjcLm iflijLiS ^ajlcu 
cûlgci-S -Trojan- jilj ulu jjulglan CiLSgcû agaScucu ûujliucuan 
lûiuggjn ifLLiLxgjj agaSJu (Client + Server) «sgj3 uLxjjgLai uiLiLa 
< CiLSan jgSgJU L3ls -DNS- agcL&jgajjj isgjncij clS jcuScLj 
OLSgaj I j-S cLSaJUla cu jîii Aiîiij Domain Name System OLSjcu&ag 
clScujuclj laajil < (jjgjl uujjjclj) cûlg (Trojan Horse) alliaa jLxgjj 
(5 g < t» n i ûUaa uujU uu3j£ji£iş ^saxjjU clS No-IP iflag cûjcLagj 

L/lJjÇ^QJ .uIqjuLj 'mjSI 1 i c l iT m jCLIUOJ ■ « »An i nQljj nn K 

jCUJJClJ jll n n 7 iii fj m g ciJL^gjJ nAnn î Iq-\ agljj^jugliL n I ■ ! ri 

.CLJCLSa jcûcljclS aiuiaj (DNS) ifli-Uaag^ 
dla uûuicuaa gj UnJcû jLScûlj LjU lûiLan ûuuggja ifUjUuijj bajil 

îûjj jLScu ja>fi 

< CiL£u ûu ulSLcû jclSLch Lj jû iflUn iSaaU jcu Ixîa jclUclI jl£ajl j < jiSn i 
iSgj&cu g£Jcu .jlSaSjîa gjaJ jjjLSjja ^ciaU'jcu U&jcû 
iSjLScu g ûLSaa ^xugU& dijb^jj < jcl£U& iflcû jo~imcliÎiclS agcûLScûl j 
. jjjS I jcuuaiîinoa gj ûiiia 



(jUgj) a3lgjaj ulSJclj uiSjjUjCLiii £ jclijjciUclS ^jlgliîi 




-ifLjjS- jUg_j l iiî ii S l m iSjlgj aJ 
gj ifLuLS agcûL&a& jju jlaa&lgjcû ulSJclx < jLggjj ^sgg jia 

>~i lîi jl^ uiSjj U j jLxLJ < ggj jjclS iSjUjcuu p jlcu < jUgj aJ ,sciSagl jjgS 

.~i mggj-t uûLigj j ajgjjcu& < jajg^nJ ûIjj xigj uiS jjjo j iSagcû gj 

. jl jclSSLa gj clSJj-S agl&ggj ,acû < njS 
jUjaui aJ &jS iS jJ g aîScû cu ajSîmggja uiSniimi OU& jglSjj& jjlg& 
ggj ^jlcuaj axiagcû cijjucû jdcû jajgn isUÎi^U gj ^ajLi £jU&clj g 
JLj cu aScixuicû ggj l^gcuîiaJ < aga&jSa& jlilm jUÎi uiSlnS ggacun 
iSjLjÎi gU gj I jj jjlg& uuUcuLj agcujLS -cuU- agajgaj ^gj&cu jLjagu 
aScLiuicû gU uûl jUjaiu l&gcuîiagijcLl ^aMcu < iSjLj3n-j I jS g < jajg& 
jUUgj gj-dcû g 1 3 jLiîi jcuucu jUI^ g agajad aiiîiigLja jUgx ifLjjLgcu 

jcuucu IjxSluiaa ( gL<& uiSJLULa) agaSjJLxgjj «s gnLcu cuagjjli ^n ■ 
. jajga ,ş( n ni hm m ) jUÎi ^jaxjaSag 



(Trojan Horse) a&lgjcû uuujcû ,sgl jmîs ,sa-iîgg 
:aScLugg iSagcû^jSjggj 

(uuUjga uuuaS-Victim) :ciSaSJcûi 
((fUxl-Link) : jLScuLj 
( jLScuugjjla) :,sgU uûLSajUjcuu 
(binder ^aaa) : jLSajLSjjS g jöîSiai iSaSaaU 
(system ^aaluuui) :ciSa jUÎi 
(M ose Click-«fLl±S) :(jLSauujgS) Cicu 
(Aim-^ûLaU-RAT) : j(jISu& uiIuiLlui 


:ûiîjj iSjLScu j£g gg& <fUcûi < RAT: Remote Access Tool 
uiaaî in 1111 agiiLj < jajga iSjUÎi njlSja3 g ûlSaa ûuiggja <flij Lxgjj .1 
.(iSgj ciSj agcû cljcu& aiajgs jclScû) jajga 
uiluicuaa g.j < OijjlS g jciajlui < gljSIuiggj& ULXugU& ulLjLo gga .2 
,b ulLjLj uûlSaJLxjLjga g jLSaiagS& LSja& g /ib cU iSjLSjia 



uûmScu jlScûl j uuÎlû 

:agaöJ ûuuaj «~i_inSj jîicula jLScûlj unîiil jjulglaa 
ja xÛcljÎiclS aS cuagcû cûlj ajgg jjclI ûmiajaa :jb ■■■«•■ ;n a uûlj .1 
i /k in~î clS OISa& Cuuggj& <fLÎ3lj iflîjlajcu ,ş g -» <j .' (Developer) 
Access) uuUjga ^gljSÛjLS jclui gj aiînl j<j~> «flaj uiîl ûjucuaa 
(Sjlgj uûLSo jgSim isjöjcu < CiISj jIS <flcu U&Jcû Cugcuad g (Victim 
,<~i mn m n iflaj gj Im inj jciSaa Cuuggja ûil jclI a jgx ,acû jluil jLj 

n^ ^g n ■ 1 1 i q I nv n^l j i lîiim i n I il n gg^ çaJ OlLjJ • «“■ mn m n i/ij|j ,u 
j n Ani n^ ig -> 4 CiQjU jLSdi ^jJI J-S IjCLLUCLJ «*■ m n •> « n^Î 7 mn inn ^ i m j y i 

ajgx jdcû ag < jcuaa iSjLScu jciSU& uuLuiaS cûlgaS oLjl^luicuaa 
.jlSaSjîa <flag < OÎjSa& uu iSjLS b uugiigU iSjglaJ imîni 
< jLxgjJaj OISja& g OUa& iSjLSeu jaSU& g a jaiîuj jl :OjÎlS uûl j 
jUaacû< jgljjuU (RAT through a network connection) uûljcu oS 
xicix cu jjaSas uûLScuÎlû uiIuiScu ^a jlcu OjjSaxJa<& jg j cuua 


.l&ljîaLS jclujcu ûjjSas Quiaj .1 
.OLSaa jgSgiû jLSÛIa .2 
.(CMD uuÎlû) jnjS JÎjÎi .3 
,OISa& (jLSaaaj clxjLj) jîg&jU& uûLScuÎlû .4 
( nnTniiui uûLSagl jUÎi Ub) iSj" Im ?Jj -5 
(Attack) ja jS jîi jûa .6 
(Software) jlLSaajoj uuxiljjaals .7 
.ujî^iuja uÛ3jS Ogajj .8 
.agcû&jS g jluûb gj jcuxiLa ifLiuLj .9 
.aû&„ .10 


Tcucu& ua cu jUIuijgij jLSallj 

in ^ i ji^i 1 ! ( ,g n ^n iT m C njij UÛOJJJ LjCU ifiîllj UUÛUCLJ (SOgCÛ g.J 

: jlSUuLj 3gSLj jLSaJLS .cuîiîS ûucu 
(uiiggjaj) agnj jgJgSjLiu ,sggjcLl .1 

laJçÇjQ^ « «“■ ■ i im djjlj ^SagCLj JHM nîm i ry 1^1 gj « nT i m n ^ 

g ogaîiSiîioa Ixîgii uûLjj g aja jcu jlglga aSig^ < OjlîÎc&jjIScu 
jgj ûşi uûîuiaS cugj < oLaa jlgil OjJggjas iSjU jl ^axiagcû 

.aSJjS 

^3-iLaU .2 

n jî im I ■ | g «“■ nni «~i^ ■ il n H I I n m t n il n h ^ i ^j l ^nl lj UligÇJjJJÎ 

.(i'ijnSoa jîa OgS Laûcû) jlScûlj ,sjg3 aJ Oxagg& uilgj gj nSigs 
aSj jliMiiîinaa iflîll j .3 
g>j < OÎmîSa&l j OşJ jclui jgj aS agaûj^as <fiîll j LIcub «sjclSj jgj 
■flîllj jLxlgn < (S jclSj OgS < aSj jggajcûcu uuluiaSaJ jLlujjj 
ja (My RAT Friend for Ever) iJnJcu OÎjgU& cu ciSju g ciSj jUîuiluia& 

ClJ < niiim i jîujgj g .'ijgm jijgS ^ajgj CLJCL<& ( aSajjjgL<& 
< I inb cu uialjU agaaaSjai ciS OLSjcl<& < ajlxaciSajcûgi±ag.S 

foj ul& Ol j .4 

jjcû f RAT OciSÎjgL<& isa jUja& cu uu Ol j gSJcu , RAT Ol j <flaJ 
Olj cûljj iSjclSj cûlgaS £03 îflifi ja :uiÎJj culg agcû iflag ajLijujj 
TRAT cu jcLLaljcu clj uix 
agajaSj uU ,sclSLSjo3 .5 
jU OÎja& gj OL <flîjgxja<& < agajciSj Ojgj < cucL&ja& g aSja& Port 

CLUjjCLCLjl^ DNS .6 

i'iij; OISa& fligj RAT l aciSjjgL<& ciS < J liiîii1 ul&jcl<& OÎjÎiU g OÎjSLj 
ciSj iS jjlSÎx ûciSaujU g ciSj jgjgxigj OaSjlj culgaS < !g.3 gj 
gj agaîii OLSjaa aScûlj isaiîii'j gcû U ogaSii joaja ^gj&cu 

.gj |S aSa jjjcû 
cuaSJcu jjjIiîiU agaJajSinU .7 
Virtual) <JlIUcl& CU n ■ jjj g n i l ~» (clSjlÖU) (SjISjlÖU ■ n <=. innT III I III 
.OJLSajLS isagcûajSinU (System 
(Warning) (cujlaLSLj) cuUjgg .8 
gj Oclocû IxiUgSaJ g iSjclSj < jLöng ûu jÎlûIScûIj jLx iflîxJcL<& 

.CygaSaajoa 
KagajciSj jjcuu l aaScu uilb jullinil .9 
(/igxJcua uiSÎmaS jgj nSig^ | aiî<&U jLScu jlSajliîiS allj ja) 




OÎjgU&cu ciSj <flîllj ajag 

ajggi-ui ûu UUIgl aS jcu& (Public) uiIjÎlS uûlj jgj l&JU&xgal 
< n i i ■“■ S j in ; i_nSdJ_ljgL<B J 11 1 T n 1 1 gSLj gj Q g < jj jS IjCLlllCLJ .~i m n~\n I 
ag < «~iiii io3 jlgUg uûl j iflîlcuagS a jîl ûagcû < cljcl<& OJLagS aSJgx 
.OciScûgS cûIjclj jclloIjcu ûnjjaa Löag ûu jîigj cLJCÛIgaJ 
aJUIj paj flLÛIgj gSU pgg-f gxiLa jgj g ,agljaS iflîjgj JLx jcu&cu 
. fliii ii ■ nT iii n j n mi q s isagjj gj | xS-ilcu U aJ g agaaaSjgS 


gj < jgUaJ flils cucu& (RAT - jLScûlj) uuîicuaJ ,scûLjl jgcû iscujgj 
.OjclSj j l imi i7 ui n ~» iflciiîjgUB iSgaJ OjJlgIa3 



:flagga uii imî 

oSojj LS jîö aSJgx < fliiaab jlScûl j ,sa jla j g aiîgg ag gU aga jcluiclI 
ggj J3cu OSÎII j jclScû agcûLSaRAT iSaiîgg jlgiiaJ g < cujaiîgg 
. OjjS-Ljl 3 agajlgxaJ 1 3JciSaiîgg «s jLajaj uulgla3 


:pamliu u iiijiî 

iSjgg jciSciJ uuliiîiU cuagcû gj jILjj < agliab aS «scûUlj gcil Oiucuaa 
.OjjSj jag ggjcu& jclScû jl isgi 


1 3 uuLjg S aJ 

glgcû gj flil3 uûUb aS ,aaSa3 ajgciS fbga uiiîiilîm g juUgju 
(iSjîlgcuB glSJcu&) cljcûLj ,acû «s jnjagîjaj uuuUgm g ciScûcuU UU3 jS 
g jLalxicû uuuUgiu g < flil3 uûaajU iflaaaS aS flciSas 

,flClSa3 jl jilîlîl JOJJOJU 

g iSi jS aiîgjîi aJ <flîjgj , flox ajl_aU RAT «sagljSIjgS cu OajUcuu 
uûLhlo gU cûÎ3 Ogjogiiîi 3JCL3 clj RAT iSagl jSjîj3 jLScûggajcûcu 
ojLSj «flîSacL3 <~i i i lgînt j niim jKn < Lx , agajcûguagS uû ISaS_aa_3 
:cûlgaJ , ciSagljSIjgS uûajaij jcuu 
gj Olj uûljajjLSnj aJ iflîjgj bSLrn iSjlgjaJ ^agcû ^gj&cu - 
allgaS jjî<&a3 ,sjLScu j3jjagîjcu g jl >S I jcuuaiImo3 umucuaa 
Remote Administration) cucuagîiîi ^acu isaSagljSijgS RAT Isajll 
Remote Adminis-) Igcû clû jggl <flaj UbJcû isagcû jcljclI 393U (Tool 

.(tration Tools 

g ga jîj jlScûl j uu'LJÎ<& jlScu isagliîi g jggcu Oa jUcuu - 
paj jjJU OjjSo 3 , Ol j uiSaa.3 jcuuaJ cljcub jÎiciSj 3 uiSÎjgxgj 
jLScûl J ^jça iÎluj JCU& nSig^ < OiiîiU jaSSUs gj cuagl jS jîj3 

Remote Access) 3gjU (Remote Access Tool) jîugcû < ijii alîjSas 

.a(Tools 

3gfxLj jl uiSÎSaa-3 I^Sjgg oli g jcûgiiagS ^jlgiaJ jeua - 
Remote Access Technol-) jîugcû cucub RAT «sjl uiSnjagl jS jîj3 
uLjgfxgU uiSîjgj jcuu uûlSaaa j cixjU uiijjSI jcmia jTiiias gjnS (ogy 
ISja3 g ,al3 aJ Ojjjo 3 jLScu cuagljSjîj3 pcU g Ojua3 «jiSaja3 jU 

.l3jlSajLagSjx 

fciSa gljSjjgS agiiîi jLacu&cu (Robust Audio Tool) «saaUjcu - 

,OÎ 3j LS oj uûiÎlScu iSia3 g Liaia iSjlgJ gjciS < aRAT 
,OÎjjgSa3 ajgciS jgj uiAiîm 393U flj3 aj RAT jblgs ag - 

iSgi isU U niiniii l3gg ^aguîi gg3 cu iSjLSjia isaiigg cûcuU p cû 
iSagciJ jascu ag jpg ^agûîi g pdf ,sagijîi cu < agaliiini jaijgS 
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